Privacy Policy

Article 1. Items of Personal Information Processed, Purpose of Processing, and Processing and Retention Period

The items, purpose of processing, and processing and retention period of the personal information processed by MAST are as follows.

In principle, MAST does not collect sensitive information that may infringe upon the privacy of data subjects. Where necessary, MAST collects such information with the separate consent of the data subject and uses it only within the limited scope of the consented purpose.

Article 2. Provision of Personal Information to Third Parties

① In principle, MAST processes the personal information of data subjects within the scope of the purposes specified in Article 1, and does not process it beyond the original scope or provide it to a third party without the prior consent of the data subject. However, in each of the following cases, MAST may use personal information for purposes other than the original purpose or provide it to a third party, except where there is a risk of unfairly infringing upon the interests of the data subject or a third party.

1. +Where the data subject has given prior consent to the provision to a third party
2. +Where special provisions exist in other Acts
3. +Where the data subject or their legal representative is unable to express their intent, or prior consent cannot be obtained due to an unknown address or similar reasons, and it is clearly deemed necessary for the urgent interests of the life, body, or property of the client or a third party
4. +Where it is necessary for purposes such as compiling statistics or academic research, and personal information is provided in a form that does not allow a specific individual to be identified

② When obtaining the consent under subparagraph 1 of paragraph (1), MAST informs the data subject of the matters in the following subparagraphs. Where any one of the following matters is changed, MAST also notifies the data subject of the change and obtains consent.

1. +The recipient of the personal information
2. +The purpose of use of the personal information (in the case of provision, this means the purpose of use by the recipient)
3. +The items of personal information to be used or provided
4. +The retention and use period of the personal information (in the case of provision, the retention and use period of the recipient)
5. +The fact that the data subject has the right to refuse consent and, where a disadvantage results from such refusal, the details of that disadvantage

Article 3. Entrustment of Personal Information Processing

① MAST does not entrust the processing of the personal information of data subjects to any third party. However, information collected through cookies and similar means for the analysis of website usage statistics is addressed separately in Article 7 (Installation, Operation, and Refusal of Cookies). Should the trustee or the content of the entrusted work change in the future, MAST will give notice through this Policy without delay.

② When entering into an entrustment contract with a trustee, MAST will, in accordance with relevant laws and regulations, set out in the contract or other documents the prohibition on processing personal information for any purpose other than performing the entrusted work, technical and administrative protective measures, restrictions on re-entrustment, the management and supervision of the trustee, and liability such as compensation for damages. MAST will also supervise whether the trustee processes personal information safely.

Article 4. Rights and Obligations of Data Subjects and the Method of Exercising Them

① Data subjects may exercise their rights relating to personal information protection against MAST, such as requesting access to, correction and deletion of, and suspension of the processing of their personal information, as prescribed by the Personal Information Protection Act and other relevant laws and regulations.

② A data subject may also exercise the rights under paragraph (1) through the data subject's legal representative or a person duly authorized by the data subject. In such a case, however, a power of attorney in accordance with the Enforcement Rule of the Personal Information Protection Act must be submitted to MAST.

③ MAST will take measures without delay in response to the exercise of rights by data subjects, as prescribed by the Personal Information Protection Act and other relevant laws and regulations.

Article 5. Destruction of Personal Information

① In principle, MAST destroys the relevant personal information without delay when such personal information becomes unnecessary, for example when the purpose of processing has been achieved.

② Where personal information must be continuously preserved without being destroyed pursuant to the provisions of relevant laws and regulations, MAST stores and manages the relevant personal information separately from other personal information.

③ MAST identifies the personal information for which a ground for destruction has arisen and destroys it with the approval of the Personal Information Protection (Management) Officer.

④ Where the personal information to be destroyed is in the form of an electronic file, MAST permanently deletes it by a method that makes recovery impossible; where it is in the form of other records, printouts, documents, or other recording media, MAST shreds or incinerates it.

Article 6. Measures to Ensure the Safety of Personal Information

MAST takes the following measures to ensure the safety of personal information.

• +1. Administrative Measures: Regular personal information protection training for members
• +2. Technical Measures: Management of access rights to personal information processing systems, installation of access control systems, encryption, installation of security programs, etc.
• +3. Physical Measures: Access control to places where personal information is stored, such as computer rooms

Article 7. Installation, Operation, and Refusal of Cookies

① MAST uses “cookies,” which store and frequently retrieve usage information, in order to tailor the information it provides to users. A cookie is a small amount of information that the server operating the website sends to the user's browser, and it may also be stored on the hard disk of the user's computer.

② MAST uses “Google Analytics 4,” a web analytics tool provided by Google, for the purpose of improving its services by analyzing the number of website visitors, usage patterns, and the like. Google Analytics collects non-identifiable statistical information through cookies, such as pages visited, time spent, device and browser information, and access region, and the information collected may be transmitted to and processed on the servers of Google LLC (or Google Ireland Limited). The privacy policy of Google Analytics is available at policies.google.com/privacy.

③ Users may refuse the storage of cookies or delete stored cookies through their web browser settings (in Chrome, Settings › Privacy and security › Third-party cookies; the equivalent setting exists in Safari, Edge and Firefox). However, if the storage of cookies is refused, some difficulty may arise in using the services.

④ Users who do not wish to have information collected through Google Analytics may refuse such collection by installing the “Google Analytics Opt-out Browser Add-on” provided by Google: tools.google.com/dlpage/gaoptout

Article 8. Amendment of the Privacy Policy

This Policy may be amended in accordance with relevant laws, regulations and guidelines, the internal rules of MAST, and the like. Where this Policy is amended, MAST will disclose the date of the amendment, the date it takes effect, and the amended contents on the website (www.mastlaw.co.kr) and keep them available there, showing the versions before and after the amendment side by side so that data subjects can easily see what has changed.

Article 9. Remedies for Infringement of Rights and Interests

Data subjects who need to report an infringement of personal information or to seek advice about one may contact the organizations below.

1. +Personal Information Dispute Mediation Committee : www.kopico.go.kr (+82-1833-6972)
2. +Korea Internet & Security Agency, Personal Information Infringement Report Center : privacy.kisa.or.kr (118)
3. +Cybercrime Investigation Division, Supreme Prosecutors' Office : www.spo.go.kr (+82-2-3480-3573)
4. +Cyber Bureau, National Police Agency : cyberbureau.police.go.kr (182)